CVEvulnerability
CVE-2014-8246
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-12-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• broadcom release automation (<= 4.7.1)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://seclists.org/fulldisclosure/2014/Dec/55 seclists.org
- http://securitytracker.com/id?1031375 securitytracker.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx Vendor Advisory
- http://www.kb.cert.org/vuls/id/343060 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/534246/100/0/threaded www.securityfocus.com
- http://seclists.org/fulldisclosure/2014/Dec/55 seclists.org
- http://securitytracker.com/id?1031375 securitytracker.com
- http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141215-01-security-notice-for-ca-lisa-release-automation.aspx Vendor Advisory
- http://www.kb.cert.org/vuls/id/343060 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/534246/100/0/threaded www.securityfocus.com